[Flashcoders] allowDomain with wildcard in the middle swf
Hi, Flash security issues differ depending on scenario. Adobe documentation for allowDomain bases mostly on couples (two interconnected swfs). I am thinking on using three separated files; two of them stored at myDomain.net and one external at some EXTERNAL.net. I would like to know your opinion on how secure could be using allowDomain with a wildcard * in a loaded swf file, which allows loading potentially any movie/swf from any external domains. The intention is creating a proxy swf file that implements a set of methods (a simple interface) that allows movies from external domains getting pieces of information from the MAIN movie but does not allow accessing MAIN objects/methods/properties directly. All of this kept in Flash, with no external scripting and cross-domain policy files. The situation looks like the following: myDomain.net | EXTERNAL.net - | A B C MAIN. swf loads - PROXY .swf loads - Some.swf into M1into M2 A:B: has object O1 uses allowDomain(*) O1.name=Smith has mc M2 has mc M1 M2 is container M1 is container for C (Some.swf) for B (PROXY.swf) has method FUN1 FUN1 returns O1.name has method FUN2 FUN2 returns O2.name has object O2 O2.name=Moore /There is no cross-domain.xml/ I have tested that: * From movie C, there is accessible only the method FUN1 (from B - our proxy), which returns a string Smith, FUN2 (returning Moore) and the object O2. * Movie C cannot access A (MAIN.swf) objects and methods, like O1 or M1 despite of the allowDomain(*) in movie B. * I tried using array notation in the external C, like _root[O1]. This returns undefined. * I tried a for..in loop on _root props from C - no results. * If a method e.g. FUN3 in B would try to return an object from the main A, e.g. O1, then the result of calling such method from C would be undefined. * If C tries to create a movieclip in A (_root.createEmpty..., _level0.createEmpty...), no such movie is created. * Ic C tries to create a movieclip in B, then it is possible, but objects and methods from A are still not accessible from the scope of the created movieclip. * C cannot load any documents from myDomain, bacause there is no cross-domain policy file. It seems that despite of the wildcard, allowDomain(*) in B, the external file C (Some.swf) has completely no access to A objects. At the same time, C can access methods implemented in B, that return basic types: string, number, boolean derived from A objects' getters/public props/returned values; this way, we can allow external movies C1, C2 ... Cn to get any information (at least in a serialized fashion) about the status of the base move (MAIN.swf) objects but in a controlled way, depending on the API implemented in B (our proxy). Finally, the question is... is this method secure ? Are there still ways to break from C (Some.swf) into our base movie A (Main.swf) ? It seems that there are not, but I am no expert in Flash security and this method can have holes. What is your opinion ? Thanks, Greg ___ Flashcoders mailing list Flashcoders@chattyfig.figleaf.com http://chattyfig.figleaf.com/mailman/listinfo/flashcoders
[Flashcoders] RE: zc.Doctor Jamar
___ Flashcoders mailing list Flashcoders@chattyfig.figleaf.com http://chattyfig.figleaf.com/mailman/listinfo/flashcoders
[Flashcoders] Job Board or List
Anyone know of any Flash specific job boards or jobs list? Please let me know. Thanks, Dave ___ Flashcoders@chattyfig.figleaf.com To change your subscription options or search the archive: http://chattyfig.figleaf.com/mailman/listinfo/flashcoders Brought to you by Fig Leaf Software Premier Authorized Adobe Consulting and Training http://www.figleaf.com http://training.figleaf.com
RE: [Flashcoders] 3-6M Flash contract in Little Rock, AR
Sorry for the confusion folks. Was trying to put as much in subject line to save you time as possible and that didn't even cross my mind. I would love a 3-6 Million dollar contract too. :) Sincerely, Dave Phillips WebTech Staffing, LLC -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Grden Sent: Tuesday, November 07, 2006 10:27 AM To: Flashcoders mailing list Subject: Re: [Flashcoders] 3-6M Flash contract in Little Rock, AR that's exactly what I thought ;( say it just once MILLLIIOONNNdollars. On 11/7/06, Carl Welch [EMAIL PROTECTED] wrote: me too. I thought it was a 3 to 6 million dollar contract... In my dreams... On 11/6/06, Adam Pasztory [EMAIL PROTECTED] wrote: Darn. When I saw the subject, I thought 3-6m was the pay. ;) On 11/6/06, John Grden [EMAIL PROTECTED] wrote: maybe we should hand write some job descriptions that make sense, and point recruiters to them to help qualify what they're really after and, to a greater degree, what they're able to realistically find. I re-read, thinking that maybe this was multiple positions, but no - it's for one: If you are interested in this position...Please only reply if you are intermediate in both Flash AND Java (not one or the other). This is the part that kills me: * ActionScript - Low to Intermediate then... * Flash/ActionScript Developer: Strong Flash and ActionScript On 11/6/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: This is my first post. If I'm supposed to post Flash jobs elsewhere, please let me know. Thanks! -- If you are interested in this position, please send resume to [EMAIL PROTECTED] Please include your desired hourly rate as well. Please only reply if you are intermediate in both Flash AND Java (not one or the other). Location: Little Rock, AR Term: 3-6 month contract, possibly longer Hourly Rate: DOE Requirements: * Flash Design - Intermediate to Advanced * ActionScript - Low to Intermediate * Sysadmin experience with J2EE servers: Required for application server setup and maintenance * Java Developer: This developer should have experience with Servlets and JSP's. I would say intermediate java skills will be fine. * HTML/Javascript Developer: Strong Javascript skills * Flash/ActionScript Developer: Strong Flash and ActionScript * Artist: Some image manipulation skills will be require Description: Contractor will provide IT services related to a leading edge technology website for a Fortune 500 company. This site is very interactive, leveraging flash components throughout. The pages are HTML files with JSP sub-pages that are tied together using Javascript. Other sections include a 3D image page which use a Viewpoint plugin along with a Java based technology. ___ Flashcoders@chattyfig.figleaf.com To change your subscription options or search the archive: http://chattyfig.figleaf.com/mailman/listinfo/flashcoders Brought to you by Fig Leaf Software Premier Authorized Adobe Consulting and Training http://www.figleaf.com http://training.figleaf.com -- [ JPG ] ___ Flashcoders@chattyfig.figleaf.com To change your subscription options or search the archive: http://chattyfig.figleaf.com/mailman/listinfo/flashcoders Brought to you by Fig Leaf Software Premier Authorized Adobe Consulting and Training http://www.figleaf.com http://training.figleaf.com ___ Flashcoders@chattyfig.figleaf.com To change your subscription options or search the archive: http://chattyfig.figleaf.com/mailman/listinfo/flashcoders Brought to you by Fig Leaf Software Premier Authorized Adobe Consulting and Training http://www.figleaf.com http://training.figleaf.com -- Carl Welch http://www.carlwelch.com [EMAIL PROTECTED] 805.403.4819 ___ Flashcoders@chattyfig.figleaf.com To change your subscription options or search the archive: http://chattyfig.figleaf.com/mailman/listinfo/flashcoders Brought to you by Fig Leaf Software Premier Authorized Adobe Consulting and Training http://www.figleaf.com http://training.figleaf.com -- [ JPG ] ___ Flashcoders@chattyfig.figleaf.com To change your subscription options or search the archive: http://chattyfig.figleaf.com/mailman/listinfo/flashcoders Brought to you by Fig Leaf Software Premier Authorized Adobe Consulting and Training http://www.figleaf.com http://training.figleaf.com
[Flashcoders] 3-6M Flash contract in Little Rock, AR
This is my first post. If I'm supposed to post Flash jobs elsewhere, please let me know. Thanks! -- If you are interested in this position, please send resume to [EMAIL PROTECTED] Please include your desired hourly rate as well. Please only reply if you are intermediate in both Flash AND Java (not one or the other). Location: Little Rock, AR Term: 3-6 month contract, possibly longer Hourly Rate: DOE Requirements: * Flash Design - Intermediate to Advanced * ActionScript - Low to Intermediate * Sysadmin experience with J2EE servers: Required for application server setup and maintenance * Java Developer: This developer should have experience with Servlets and JSP's. I would say intermediate java skills will be fine. * HTML/Javascript Developer: Strong Javascript skills * Flash/ActionScript Developer: Strong Flash and ActionScript * Artist: Some image manipulation skills will be require Description: Contractor will provide IT services related to a leading edge technology website for a Fortune 500 company. This site is very interactive, leveraging flash components throughout. The pages are HTML files with JSP sub-pages that are tied together using Javascript. Other sections include a 3D image page which use a Viewpoint plugin along with a Java based technology. ___ Flashcoders@chattyfig.figleaf.com To change your subscription options or search the archive: http://chattyfig.figleaf.com/mailman/listinfo/flashcoders Brought to you by Fig Leaf Software Premier Authorized Adobe Consulting and Training http://www.figleaf.com http://training.figleaf.com
[Flashcoders] newbie - FLVPlayback component and loading external FLV files via XML
Does anyone have an example of using the FLVPlayback component and loading
external FLV files via XML?
Right now I have a instance of the FLVPlayback component on my stage with an
instance name of myFLVPlayback. In my actionscript, I have this:
_root.myFLVPlayback._visible = false;
which sets the visibility to false. When a user selects the Show Video btn
on my stage it sets _visible = true; and then I need it to load the contentPath
from my XML file.
This is currenlty what I have attached to my btn:
on (release) {
this.videobkgd_mc.gotoAndPlay(2);
_root.myFLVPlayback._visible = true;
import mx.video.*;
var listenerObject:Object = new Object();
listenerObject.ready = function(eventObject:Object):Void {
_root.myFLVPlayback.play();
};
myFLVPlayback.addEventListener(ready, listenerObject);
myFLVPlayback.contentPath = http://www.helpexamples.com/flash/video/water.flv;;
}
This is the example in the help section I found. I am trying to set the
content path from my XML, but my video is rtmp: and even when I just type in
the path to my flv file it won't play. Can anyone help? Or have an example I
can check out that is pulling videos from an XML file?? I am in desperate need
to get this to work!!
What I eventually need is to create a function because I will need to load
different videos based on selection, but right now I am just attaching it to my
button to see if I can get this FLVPlayback componenet to work. I am not
familiar with the FLVPlayback componenet and there is not much out there.
Thanks!
P. Joel Pasion
www.zynergystudios.com
___
Flashcoders@chattyfig.figleaf.com
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders
Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com
[Flashcoders] fuse kit and events
allright boys.
just switched over from kicking with the regular laco tween class to using
the fuse kit engine.
though i am having some problems with the events.
first off i import (into one of my classes):
import com.mosesSupposes.fuse.* ;
then i do like:
var menuPress_out = new Fuse ( { target : clip , _height : 400 , ease :
'easeOutElastic' , seconds : 1.9 , delay : 0 } ) ;
so far so good. tween executes and works smooth.
though now i want to assign an event to this baby.
usually i use my own eventhandler class and with that i would just add like:
EventDelegate.create ( menuPress_out , onComplete , tweenDone ) ;
but of course this doesn't work. event is totally ignored. same result if
i use the adobe/mm eventdispatcher - nothing.
been reading a lot on the fuse site and doing a lot a googling, but i just
can't figure it out - seems like there is a million diffrent syntaxes..
anyone been doing this?
thanks,
fred
___
Flashcoders@chattyfig.figleaf.com
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders
Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com
Re: [Flashcoders] fuse kit and events
can add to that, that i dont want to use the callback thingie ({scope,
func,args}), since i want to check for events like onAdvance and similar..
allright boys.
just switched over from kicking with the regular laco tween class to using
the fuse kit engine.
though i am having some problems with the events.
first off i import (into one of my classes):
import com.mosesSupposes.fuse.* ;
then i do like:
var menuPress_out = new Fuse ( { target : clip , _height : 400 , ease :
'easeOutElastic' , seconds : 1.9 , delay : 0 } ) ;
so far so good. tween executes and works smooth.
though now i want to assign an event to this baby.
usually i use my own eventhandler class and with that i would just add
like:
EventDelegate.create ( menuPress_out , onComplete , tweenDone ) ;
but of course this doesn't work. event is totally ignored. same result if
i use the adobe/mm eventdispatcher - nothing.
been reading a lot on the fuse site and doing a lot a googling, but i just
can't figure it out - seems like there is a million diffrent syntaxes..
anyone been doing this?
thanks,
fred
___
Flashcoders@chattyfig.figleaf.com
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders
Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com
___
Flashcoders@chattyfig.figleaf.com
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders
Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com
Re: [Flashcoders] domain name
You cannot include an as file in run-time. This is done by the compiler when
you publish your swf file.
When you want to check the existence of a substring in some string (like a
domain name) you can use the string functions in actionscript.
Like the split function...
var domain_str:String = www.somedomain.com;
var split_arr:Array = domain_str.split (.);
/*
* split_arr is now an array [www,somedomain,com]
if (split_arr[0] == www) {
trace (got www);
} else {
trace (no www here);
}
But i'm not sure this is what you mean!
Simon
Citeren Laurent CUCHET [EMAIL PROTECTED]:
I try to find a page and determine if www are there
I have to write all the time the website name.
Is there a way to know if www is in Name ??
Thank you
domainname = new LocalConnection();
trace(domainname.domain());
this.dm.text = domainname.domain();
if (this.dm.text == www.webpage.com) {
#include flash_AS_detection.as
} else {
getURL(http://www.webpage.com;, _parent);
}
___
Flashcoders@chattyfig.figleaf.com
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders
Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com
This message was sent using IMP, the Internet Messaging Program.
___
Flashcoders@chattyfig.figleaf.com
To change your subscription options or search the archive:
http://chattyfig.figleaf.com/mailman/listinfo/flashcoders
Brought to you by Fig Leaf Software
Premier Authorized Adobe Consulting and Training
http://www.figleaf.com
http://training.figleaf.com
[Flashcoders] video question
so i asked in an earlier post about loading multiple flv's and geting them to work as one. The other question I have is about NetStream vs a mediaDisplay component. So when loading flv's with NetStream. it seems so far like it loads it into the buffer and plays, and when it's done it unloads the buffer. thats cool. but does it cache it at all? I am needing to be able to load multiple flvs ( in the background when people are using the page) and play them as one, once the person decides to watch the video. But it doesnt really seem possible with netStream because it just streams it. it's not like loading it and keeping it in cache, is it? VS mediaDisplay component where I can use the setMedia. and the other thing to keep in mind is were preloading the video in the background so that there is no buffering or loading. to me it seems like this would be better with the mediaDisplay component just because of the API thats already there. anyone have any experience with this situation or have any recommendations for me? thanks all smith ___ Flashcoders@chattyfig.figleaf.com To change your subscription options or search the archive: http://chattyfig.figleaf.com/mailman/listinfo/flashcoders Brought to you by Fig Leaf Software Premier Authorized Adobe Consulting and Training http://www.figleaf.com http://training.figleaf.com
[Flashcoders] playing multiple flvs as one. and seeking
does anyone know of any example src or tutorials on pulling multiple flvs together and playing them as one. and being able to seek seamlessly. ? thanks. smith ___ Flashcoders@chattyfig.figleaf.com To change your subscription options or search the archive: http://chattyfig.figleaf.com/mailman/listinfo/flashcoders Brought to you by Fig Leaf Software Premier Authorized Adobe Consulting and Training http://www.figleaf.com http://training.figleaf.com
[Flashcoders] upload bitmap data web cam snapshot with php
hey. Does anyone know where i can find Robert M Halls example of taking a snapshot with a webcam and uploading it. Or another example? thanks smith ___ Flashcoders@chattyfig.figleaf.com To change your subscription options or search the archive: http://chattyfig.figleaf.com/mailman/listinfo/flashcoders Brought to you by Fig Leaf Software Premier Authorized Adobe Consulting and Training http://www.figleaf.com http://training.figleaf.com
[Flashcoders] red5 recording viedo streams
can anyone point me in the direction of being able to record video streams with red5. It says on osflash that you can. just looking for a direction to go. or maybe an example or tutorial or something. without having to read all of the docs on it. ___ Flashcoders@chattyfig.figleaf.com To change your subscription options or search the archive: http://chattyfig.figleaf.com/mailman/listinfo/flashcoders Brought to you by Fig Leaf Software Premier Authorized Adobe Consulting and Training http://www.figleaf.com http://training.figleaf.com
[Flashcoders] LoadSound from shoutcast server
Hi, I have try to make a radio mp3 player who play mp3 stream coming from server. All works fine in the Flash Api or when y test locally the swf. code ur = http://193.201.103.19:9100; http://193.201.103.19:9100/; mySnd = new Sound(); mySnd.loadSound( ur,true); /code But when i tried to build a desktop application using mprojector or Screenweaver Os the stream don't load. This is not a security issue, so i tried to put my swf on a web server... doesn't work anymore. For FireFox i find a trick by adding a /; just after the url and that work: code ur = http://193.201.103.19:9100; http://193.201.103.19:9100/; mySnd = new Sound(); mySnd.loadSound( ur+ /;,true); /code But it doesn't works in IE and in mprojector generated files. So i have a look a the httpheader and see that for the radio who use shoutcast send nothing after HTTP/1.x 200 OK and other radio send something like : HTTP/1.x 200 OK Content-Type: audio/mpeg icy-br: 128 icy-genre: rock icy-name: ouifm - la radio rock - relais 128 kbps icy-notice1: BRThis stream requires a href=http://www.winamp.com/;http://www.winamp.com/ Winamp/aBR icy-notice2: SHOUTcast Distributed Network Audio Server/win32 v1.9.2BR icy-pub: 0 icy-url: http://www.ouirock.com Server: Icecast 2.2.0 So what can be the differences in a Flash swf file or an flash exe file AND a file generated by mprojector or online swf ? -- Julien TERRAZ ___ Flashcoders@chattyfig.figleaf.com To change your subscription options or search the archive: http://chattyfig.figleaf.com/mailman/listinfo/flashcoders Brought to you by Fig Leaf Software Premier Authorized Adobe Consulting and Training http://www.figleaf.com http://training.figleaf.com
[Flashcoders] POST question
Has anyone run into issues with doing a LoadVars.send() using POST with IE 6.0 and Flash plug-in 7.0.19? I'm seeing a consistent problem that I think involves SP2 and user interface issues, but I'm trying to rule out plug-in quirks. thanks -Ricky ___ Flashcoders mailing list Flashcoders@chattyfig.figleaf.com http://chattyfig.figleaf.com/mailman/listinfo/flashcoders
